A team wants to automatically test CloudFormation templates before deploying them to production. Which approach is most aligned with change management best practices for IaC?

Running cfn-lint and cfn-nag in a CI pipeline

Using AWS CloudFormation Designer to validate templates

Manually reviewing templates in the CloudFormation console

Deploying templates to production and monitoring for errors

A DevOps team manages a CloudFormation StackSet that deploys a common security group to multiple accounts. They need to update the security group rules and want to ensure that the change is reviewed and tested before it is applied to production accounts. Which process should they follow?

Use AWS Config to detect changes to the security group and revert them if needed.

Use a CI/CD pipeline that validates the template, deploys to a test account first, and then updates the StackSet in production after approval.

Edit the template directly in the StackSet and update the stack instances immediately.

Use AWS Systems Manager to run a script that updates the security group in all accounts.

A company has a mix of EC2 instances and on-premises servers. They need a configuration management solution that can manage both environments, supports a declarative model, and integrates with AWS Systems Manager for patching and operational tasks. Which service should they choose?

AWS Systems Manager State Manager

AWSCertified DevOps Engineer - Professional

Domain 2Objective 1

Task Statement 2.1: Define Cloud Infrastructure and Reusable Components to Provision and Manage Systems Throughout Their Lifecycle. DOP-C02 Practice Questions (Page 3)

Part of the Content Domain 2: Configuration Management and IaC domain, which accounts for 17% of the DOP-C02 exam. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 4–7 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

7concepts

17%of the exam

7 Concepts in This Objective

IaC options and tools for AWS
Change management for IaC
Configuration management services and strategies
Composing and deploying IaC templates
CloudFormation StackSets for multi-account/region
Selecting configuration management services
Reusable IaC patterns and governance

Questions 11–15

11foundation · easy
A company wants to deploy the same CloudFormation template to multiple AWS accounts and multiple Regions, with centralized management from a single administrator account. Which AWS feature is designed for this purpose?
Select an answer first
12foundation · easy
A team wants to automatically test CloudFormation templates before deploying them to production. Which approach is most aligned with change management best practices for IaC?
Select an answer first
13application · medium
A DevOps team manages a CloudFormation StackSet that deploys a common security group to multiple accounts. They need to update the security group rules and want to ensure that the change is reviewed and tested before it is applied to production accounts. Which process should they follow?
Select an answer first
14application · medium
A company has a mix of EC2 instances and on-premises servers. They need a configuration management solution that can manage both environments, supports a declarative model, and integrates with AWS Systems Manager for patching and operational tasks. Which service should they choose?
Select an answer first
15foundation · easy
In a CloudFormation template, which section is used to define values that can be passed in when the stack is created or updated, allowing the same template to be reused in different environments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DOP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “DOP-C02” is a trademark of its owner, used for identification only.

Task Statement 2.1: Define Cloud Infrastructure and Reusable Components to Provision and Manage Systems Throughout Their Lifecycle. DOP-C02 Practice Questions (Page 3)

Questions 11–15

A company wants to deploy the same CloudFormation template to multiple AWS accounts and multiple Regions, with centralized management from a single administrator account. Which AWS feature is designed for this purpose?

A team wants to automatically test CloudFormation templates before deploying them to production. Which approach is most aligned with change management best practices for IaC?

A DevOps team manages a CloudFormation StackSet that deploys a common security group to multiple accounts. They need to update the security group rules and want to ensure that the change is reviewed and tested before it is applied to production accounts. Which process should they follow?

A company has a mix of EC2 instances and on-premises servers. They need a configuration management solution that can manage both environments, supports a declarative model, and integrates with AWS Systems Manager for patching and operational tasks. Which service should they choose?

In a CloudFormation template, which section is used to define values that can be passed in when the stack is created or updated, allowing the same template to be reused in different environments?

Keep studying — Content Domain 2: Configuration Management and IaC